CVE-2026-12158 - RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
CVE ID :CVE-2026-12158 Published : July 1, 2026, 7:53 a.m. | 5 hours, 19 minutes ago Description :The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due to missing or...